1917 matches found
kong
Kong: The Agentic Reverse Engineer LLM orchestration for reverse engineering binaries What is Kong? Most tasks follow a linear relationship: the more difficult a task, the longer it usually takes. Reverse engineering and binary analysis is a task in which the actual difficulty is somewhat trivial...
cve-2014-6271-mengjia-kong
Questo repository non contiene un README...
Kong Admin <=2.03 - Admin API Access
Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. id: CVE-2020-11710 info: name: Kong Admin =2.03 - Admin API Access author: pikpikcu severity: critical description: Kong Admin through 2.0.3 contains an issue v...
kong-pwn
kong-pwn Usa la KongAPI esposta per agire come un proxy e ottenere URL di metadata o URL interni. CVE-2020-11710 - Non è una vulnerabilità, è una errata configurazione. Come usarlo usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are required: -u/--url,...
CVE-2026-14916
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
CVE-2026-14917
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
CVE-2026-14916
Kong API Gateway Enterprise is affected by a JWT algorithm-confusion vulnerability in components that validate JWTs for MCP OAuth2 or DataKit integrations. The root cause is a failure to verify that the JWT signing algorithm is compatible with the type of key used for verification, allowing an un...
CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
EUVD-2026-80389
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
EUVD-2026-80387
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
CVE-2026-14917
CVE-2026-14917 is a SAML authentication bypass in the Kong API Gateway Enterprise SAML plugin. When the validate_assertion_signature option is explicitly set to false (it is enabled by default ), the plugin extracts the SAML identity from an unsigned assertion without verifying a valid cryptograp...
PT-2026-93423
Name of the Vulnerable Software and Affected Versions Kong SAML plugin affected versions not specified Description An authentication bypass exists in the Kong SAML plugin when the validate assertion signature option is explicitly set to false. In this configuration, the plugin may extract the SAM...
CVE-2026-14916: Improper Handling of Unexpected Data Type
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
PT-2026-93431
Name of the Vulnerable Software and Affected Versions Kong API Gateway Enterprise affected versions not specified Description A JWT signature verification issue exists in Kong components that handle JWT validation for MCP OAuth2 or DataKit integrations. The system fails to properly validate wheth...
CVE-2026-14917: Authentication Bypass Using an Alternate Path or Channel
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
CVE-2026-86879
creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:04+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 21:16:33+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:00:56+00:00|...